activity
20232026
most citedBadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

4 citations · 7 across the 33 of their papers we have counts for

collaborators

35 papers

cs.AI2026

Learning What to Retain: Gated-Memory Routing for Efficient Collaboration in Multi-Agent LLM Systems

Rakibul Hasan Rajib, Mengxin Zheng, Qian Lou

Large language model (LLM)-based multi-agent systems tackle complex reasoning by orchestrating how multiple agents are configured and how they collaborate. A central challenge is t…

cs.CR2026

Conjunctive Poisoning in AI Supply-Chain Applications

Nokimul Hasan Arif, Qian Lou, Mengxin Zheng

Large Language and Vision-Language Models are increasingly deployed through inference pipelines that include prompt wrappers (e.g., templates and post-processing scripts) and confi…

cs.NI2026

HW-Router: Hardware-Aware Routing for Scalable Multi-LLM Serving

Ahasan Kabir, Jiaqi Xue, Mengxin Zheng +1

Modern large language model (LLM) serving platforms deploy multiple models across different GPUs, requiring routers to direct incoming queries to appropriate LLMs. However, existin…

cs.MA2026

Learning Latency-Aware Orchestration for Multi-Agent Systems

Xi Shi, Mengxin Zheng, Qian Lou

Multi-agent systems (MAS) coordinate multiple LLM-powered agents through structured workflows, gaining reasoning power but incurring high inference latency from multi-step executio…

quant-ph2026

CutBackdoor: A Circuit Cut Triggered Backdoor Attack on Variational Quantum Algorithms

Ahatesham Bhuiyan, Hoang Ngo, Cheng Chu +4

Variational Quantum Algorithms (VQAs) are a leading paradigm for near-term quantum computing, combining parameterized quantum circuits with classical optimization across quantum ch…

cs.CV2026

REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs

Yifei Zhao, Qian Lou, Mengxin Zheng

Vision-language models (VLMs) are increasingly used as perception-reasoning backbones for embodied intelligence in safety-critical physical systems, where perception or reasoning e…

cs.AI2026

INFRAMIND: Infrastructure-Aware Multi-Agent Orchestration

Ahasan Kabir, Jiaqi Xue, Mengxin Zheng +1

Existing multi-agent LLM orchestration methods, ranging from brute-force ensembles to learned routers, select models and topologies based on task and model features. However, these…

cs.CR2026

MPC-Patch-Bench: Security-Aware LLM Code Patch for Multi-Party Computation

Yukuan Zhang, Mengxin Zheng, Qian Lou

Repository-level benchmarks for evaluating Large Language Model (LLM) code repair on Secure Multi-Party Computation (MPC) software do not yet exist, and directly transplanting gene…

cs.CL2026

AgentServeSim: Serving-System Simulation and Policy Search for LLM Agent Programs

Rakibul Hasan Rajib, Mengxin Zheng, Qian Lou

Large language model agents execute programs comprising multiple model turns interleaved with external tool calls. Their job completion time depends on how the serving system retai…

cs.CV2026

SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models

Yifei Zhao, Qian Lou, Mengxin Zheng

The public accessibility of large vision-language models (LVLMs) raises serious concerns about unauthorized model reuse and intellectual property infringement. Existing ownership v…

cs.MA2026

Conjunctive Prompt Attacks in Multi-Agent LLM Systems

Nokimul Hasan Arif, Qian Lou, Mengxin Zheng

Most LLM safety work studies single-agent models, but many real applications rely on multiple interacting agents. In these systems, prompt segmentation and inter-agent routing crea…

cs.CR2026

SecureRouter: Encrypted Routing for Efficient Secure Inference

Yukuan Zhang, Mengxin Zheng, Qian Lou

Cryptographically secure neural network inference typically relies on secure computing techniques such as Secure Multi-Party Computation (MPC), enabling cloud servers to process cl…

cs.CR2026

RobPI: Robust Private Inference against Malicious Client

Jiaqi Xue, Mengxin Zheng, Qian Lou

The increased deployment of machine learning inference in various applications has sparked privacy concerns. In response, private inference (PI) protocols have been created to allo…

cs.CR2026

RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance

Miao Lin, Feng Yu, Rui Ning +6

Deep neural networks are highly susceptible to backdoor attacks, yet most defense methods to date rely on balanced data, overlooking the pervasive class imbalance in real-world sce…

cs.MA2026★ 2 cited

Learning Latency-Aware Orchestration for Multi-Agent Systems

Xi Shi, Mengxin Zheng, Qian Lou

Multi-agent systems (MAS) coordinate multiple LLM-powered agents through structured workflows, gaining reasoning power but incurring high inference latency from multi-step executio…

cs.CR2025

PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs

Jiaqi Xue, Yifei Zhao, Mansour Al Ghanim +4

Text watermarking for large language models (LLMs) enables model owners to verify text origin and protect intellectual property. While watermarking methods for closed-source LLMs a…

cs.LG2025

DictPFL: Efficient and Private Federated Learning on Encrypted Gradients

Jiaqi Xue, Mayank Kumar, Yuzhang Shang +5

Federated Learning (FL) enables collaborative model training across institutions without sharing raw data. However, gradient sharing still risks privacy leakage, such as gradient i…

cs.LG2025

VQEzy: An Open-Source Dataset for Parameter Initialization in Variational Quantum Eigensolvers

Chi Zhang, Mengxin Zheng, Qian Lou +2

Variational Quantum Eigensolvers (VQEs) are a leading class of noisy intermediate-scale quantum (NISQ) algorithms, whose performance is highly sensitive to parameter initialization…

cs.ET2025

DiffQ: Unified Parameter Initialization for Variational Quantum Algorithms via Diffusion Models

Chi Zhang, Mengxin Zheng, Qian Lou +1

Variational Quantum Algorithms (VQAs) are widely used in the noisy intermediate-scale quantum (NISQ) era, but their trainability and performance depend critically on initialization…

cs.CL2025

Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts

Rochana Prih Hastuti, Rian Adam Rajagede, Mansour Al Ghanim +2

As large language models (LLMs) are adapted to sensitive domains such as medicine, their fluency raises safety risks, particularly regarding provenance and accountability. Watermar…

cs.IR2025

PIR-RAG: A System for Private Information Retrieval in Retrieval-Augmented Generation

Baiqiang Wang, Qian Lou, Mengxin Zheng +1

Retrieval-Augmented Generation (RAG) has become a foundational component of modern AI systems, yet it introduces significant privacy risks by exposing user queries to service provi…

cs.CR2025

AttestLLM: Efficient Attestation Framework for Billion-scale On-device LLMs

Ruisi Zhang, Yifei Zhao, Neusha Javidnia +2

As on-device LLMs(e.g., Apple on-device Intelligence) are widely adopted to reduce network dependency, improve privacy, and enhance responsiveness, verifying the legitimacy of mode…

cs.CR2025

Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Accelerators

Jiaqi Xue, Yifei Zhao, Mengxin Zheng +3

Recent advances in Transformer models, e.g., large language models (LLMs), have brought tremendous breakthroughs in various artificial intelligence (AI) tasks, leading to their wid…

cs.CR2025

zkVC: Fast Zero-Knowledge Proof for Private and Verifiable Computing

Yancheng Zhang, Mengxin Zheng, Xun Chen +5

In the context of cloud computing, services are held on cloud servers, where the clients send their data to the server and obtain the results returned by server. However, the compu…